building an openssl on a system without SSL certificates is actually a non-trivial problem.  There is some bootstrapping that makes this a bit difficult.  Do we really need to install our own SSL?  This is part of the substrate that I'd rather not touch if we can avoid it.